Windows memory integrity switches on automatically for eligible devices in October 2026
Microsoft's Windows quality updates will automatically enable memory integrity and Virtualization-based Security on eligible devices starting October 2026.
Beginning in October 2026, Windows quality updates will automatically enable memory integrity on eligible devices and turn on Virtualization-based Security where it is not already running. Memory integrity restricts kernel-mode execution to trusted, signed code and drivers, blocking kernel compromise and rootkits. Microsoft said existing administrator decisions remain in effect, and readiness checks weigh hardware capability, compatibility, and performance. Memory integrity also underpins hotpatch updates that install without a reboot, so unprotected devices are excluded from that servicing model.
- Quality updates will enable memory integrity and VBS where readiness checks pass; admin policies still take precedence
- Memory integrity underpins hotpatch updates, so unprotected devices miss the no-reboot servicing model
- Readiness evaluation covers hardware, compatibility, and performance; unusual kernel drivers remain the admin's responsibility
From the original article
1 min read at helpnetsecurity.com
Beginning in October 2026, Windows quality updates start enabling memory integrity protection on eligible devices with little or no additional configuration. On machines where Virtualization-based Security is not already running, those same updates enable VBS too.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.